Job Title: Senior Information Technology Consultant
Department: Security Risk Consulting
Location: New York, NY
Reports to: Vice President, Security Risk Consulting
Job Type: Full-time
FLSA Status: Exempt
This Senior Information Technology Consultant is responsible for implementing IT security consulting engagements as part of the Security Risk Consulting team. The position will focus on identifying information security vulnerabilities and providing recommendations on solutions applied to client IT environments.
This senior-level position will be part of a part of a cross-functional security risk team that gathers technical and procedural information, deploys IT audit tools, analyzes information so derived, assesses information security risk, and presents results applicable to complex IT environments.
The responsibilities of this position include but are not limited to the following:
Investigate relevant information regarding client IT environments via interviews and information analysis
Understand existing client processes and controls with respect to electronic and non-electronic information security.
Coordinate with Stroz Friedbeg security specialists, digital forensic examiners/data breach experts, network engineers, system engineers and Web application engineers to explore and report on specific security risk issues in depth.
Provide recommendations on IT solutions to help clients manage information security risk.
Manage third party relationships relating to additional security services as required (e.g., penetration testing)
Develop IT security risk metrics wherever possible and identify issues that put clients at risk.
Document results of security risk analyses and formally present to clients
Assess IT network and security architectures as they relate to managing identities and access privileges, delegated administration models, workflow and access control models
Understand current regulatory environment and related implications to security management compliance
The ideal candidate would have 8-10 years in progressively sophisticated roles in information security engineering and/ or IT technical project management The position requires a strong, diverse technical background and truly exceptional oral and written communications skills. The candidate must demonstrate proven success in working in a team as well as independently and exhibit follow-through to understand root causes of issues. This position calls for an individual who exhibits thoughtful introspection but is also able to assess a broad spectrum of issues. A collaborative approach is a must, as well as the ability to effectively communicate with a wide range of technical and non-technical personnel. Finally, personal flexibility and the ability to travel globally is required.
Essential Job Functions
This senior level position requires handling multiple engagements with overlapping deadlines. A demonstrated ability to write clear, coherent and precise reports on a multiplicity of complex technical issues is essential.
8-10 years of IT security engineering with an emphasis on network security
Excellent written and verbal communication skills.
IT security certifications (CISA, CISM, CISSP) a plus
Bachelors Degree in computer science or information technology. Masters degree in information/computer science or a technology-related field preferred.
Stroz Friedberg - 12 months ago
Stroz Friedberg is a leading global digital risk management and investigations firm. The company specializes in digital forensics, data...